ph9 is committed to protecting the personal data of every Filipino player who uses our platform. This Privacy Policy explains what data ph9 collects, why we collect it, how it is used and protected, who it is shared with, and how you can exercise your rights under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173).
As a Philippine resident, you have specific legal rights over your personal data under the Data Privacy Act of 2012. ph9 is committed to honouring every one of them.
This Privacy Policy ("Policy") is issued by ph9.asia ("ph9," "we," "us," or "our") and describes how ph9 collects, uses, stores, discloses, and protects the personal data of individuals ("you," "your," or "Data Subject") who access the ph9 website at ph9.asia, register a ph9 account, or use any ph9 products, services, or features (collectively, the "Services").
ph9 is a data controller under the Data Privacy Act of 2012 (Republic Act No. 10173, "DPA") and its Implementing Rules and Regulations. ph9 is registered with the National Privacy Commission (NPC) as required by applicable Philippine law. ph9 also processes data in accordance with the requirements of the Philippine Amusement and Gaming Corporation (PAGCOR) and the Anti-Money Laundering Act (RA 9160, as amended, "AMLA").
This Policy applies to all personal data collected through the ph9 website, mobile applications, customer support interactions, and any other channel through which ph9 provides its Services. It does not apply to third-party websites, platforms, or applications that may be linked to or integrated with ph9, which are governed by their own separate privacy policies.
ph9 collects personal data in three primary ways: data you provide directly when registering or using ph9 services; data generated automatically through your use of the ph9 platform; and data received from third-party sources such as payment providers, identity verification services, and fraud-prevention partners.
| Category | Examples | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, gender, nationality | Registration and KYC verification |
| Contact Data | Email address, Philippine mobile number, residential address | Registration and account updates |
| Identity Document Data | Government ID type, ID number, ID images (PhilSys, passport, driver's licence, UMID) | KYC verification |
| Financial Data | GCash mobile number, Maya account, bank account name and number (for withdrawals) | Payment setup and transactions |
| Support Data | Content of support chats, emails, and complaint submissions | Customer support interactions |
ph9 may receive personal data about you from third-party sources including GCash and Maya (for SSO authentication and payment verification), identity verification service providers (for automated document and biometric checks), fraud detection partners, and PAGCOR's player registration systems where applicable. ph9 ensures that any third-party data sharing is conducted under appropriate data sharing agreements and in compliance with the DPA.
ph9 uses your personal data only for specific, legitimate purposes that are directly connected to the provision of ph9's online casino and sports betting services in the Philippines. The following table describes the primary purposes for which ph9 processes personal data.
| Purpose | Description |
|---|---|
| Account Management | Creating, maintaining, verifying, and operating your ph9 account, including login authentication and 2FA |
| KYC & Identity Verification | Verifying your identity and age (21+) in compliance with PAGCOR requirements and the AMLA |
| Payment Processing | Processing deposits and withdrawals via GCash, Maya, BPI, BDO, USDT, and other authorised channels |
| Regulatory Compliance | Meeting PAGCOR reporting obligations, AMLA suspicious transaction reporting, NPC data registration, and other applicable Philippine legal requirements |
| Fraud Prevention | Detecting and preventing fraudulent accounts, money laundering, bonus abuse, and other prohibited activities |
| Customer Support | Responding to enquiries, resolving disputes, processing complaints, and providing responsible gaming assistance |
| Responsible Gaming | Enforcing deposit limits, loss limits, self-exclusion, and 21+ age restrictions; identifying players showing signs of problem gambling |
| Platform Improvement | Analysing usage patterns to improve platform performance, game selection, and user experience for Filipino players |
| Marketing | Sending promotional emails, SMS notifications, and personalised bonus offers — only where you have provided consent and have not opted out |
Under the Data Privacy Act of 2012, ph9 must have a lawful basis for each category of personal data processing. ph9 processes personal data under the following legal bases:
ph9 does not sell, rent, or trade your personal data to third-party marketers or data brokers. ph9 shares your personal data only in the specific circumstances described below, and only to the extent necessary for the stated purpose.
ph9 is required by Philippine law to share certain personal data with government bodies including PAGCOR (for gaming regulatory oversight), the Anti-Money Laundering Council (AMLC) (for suspicious transaction and covered transaction reporting under the AMLA), the National Privacy Commission (NPC) (for data breach notification and privacy compliance), the Bureau of Internal Revenue (BIR) (for applicable tax reporting), and Philippine law enforcement authorities (pursuant to valid lawful orders).
ph9 engages third-party service providers acting as data processors under ph9's instruction for specific operational purposes. These include payment processing providers (GCash, Maya, BPI, BDO, and other payment partners), identity verification and KYC service providers, fraud detection and AML screening partners, cloud hosting and infrastructure providers, customer support platform providers, and SMS and email communication providers. All data processors engaged by ph9 are bound by data processing agreements that require them to process personal data only on ph9's instructions and in compliance with the DPA.
Certain game data (such as your account identifier, currency, and gaming session details) is shared with licensed third-party game providers whose games are integrated into the ph9 platform. This data sharing is limited to what is technically necessary for game delivery and is conducted under data sharing agreements.
ph9 uses cookies and similar tracking technologies on the ph9 website and platform to provide, improve, and secure the Services. Cookies are small data files placed on your device when you access ph9. The following types of cookies are used by ph9:
You can manage cookie preferences through your browser settings. Note that disabling strictly necessary or security cookies may prevent certain ph9 features from working correctly or may restrict your access to the platform. ph9 does not use third-party advertising or behavioural tracking cookies for serving advertisements on external websites.
ph9 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, to comply with applicable Philippine legal and regulatory obligations, and to resolve disputes. ph9 does not retain personal data for longer than is necessary.
| Data Category | Retention Period | Basis |
|---|---|---|
| Account and Identity Data | Duration of account + 5 years after closure | PAGCOR / AMLA requirements |
| KYC Documents | Duration of account + 5 years after closure | AMLA (RA 9160, as amended) |
| Transaction Records | Duration of account + 5 years after closure | AMLA / PAGCOR / BIR |
| Gaming Activity Logs | Duration of account + 2 years after closure | Dispute resolution / PAGCOR |
| Customer Support Records | 3 years from last interaction | Dispute resolution |
| Marketing Consent Records | Until withdrawal of consent + 2 years | DPA compliance |
Following the expiry of the relevant retention period, ph9 will securely delete or anonymise your personal data. Where anonymisation is used, the anonymised data may be retained indefinitely for aggregate statistical analysis.
ph9 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, disclosure, and destruction. ph9's security architecture is designed to the same standard expected of Philippine financial institutions.
Under the Data Privacy Act of 2012, you have the following rights in relation to your personal data held by ph9. ph9 provides mechanisms for you to exercise all of these rights, and will respond to verified requests within the timeframes required by the DPA.
To exercise any of the rights listed above, contact ph9's Data Protection Officer via email (plain text only — not a link): [email protected]. Please include your full name, your registered ph9 account email address, the specific right you wish to exercise, and sufficient detail to allow ph9 to identify and process your request. ph9 may require identity verification before processing a data subject request to protect against fraudulent access to other players' data.
ph9 is strictly an adult gambling platform restricted to individuals who are 21 years of age or older in accordance with PAGCOR's requirements. ph9 does not knowingly collect personal data from individuals under the age of 21. ph9 implements mandatory age verification at registration and does not permit any individual under 21 to hold or use a ph9 account.
If ph9 becomes aware that personal data has been collected from an individual under the age of 21, ph9 will immediately close the relevant account, delete the personal data associated with that account to the extent permitted by law, and refund any deposits made. Parents or guardians who believe that a minor under their care has created a ph9 account should contact ph9 support immediately so that the account can be closed without delay.
ph9 may update this Privacy Policy from time to time to reflect changes in applicable Philippine law, NPC guidance, PAGCOR regulatory requirements, ph9's data processing practices, or the expansion of ph9's services. The date of the most recent revision is displayed at the top of this document and in the document metadata panel.
Where ph9 makes material changes to this Policy — changes that significantly affect how your personal data is processed or your rights as a data subject — ph9 will notify you via email to your registered ph9 account address, or by posting a prominent notice on the ph9 website, at least thirty (30) calendar days before the changes take effect. For non-material updates, ph9 will update the version number and effective date of this Policy without individual notification.
Continued use of ph9 services following the effective date of any amended Privacy Policy constitutes your acknowledgment of the updated Policy. If you disagree with any material change, you may close your ph9 account and request the erasure of your personal data to the extent permitted by ph9's legal retention obligations.
ph9 has appointed a Data Protection Officer (DPO) as required by the Data Privacy Act of 2012. The ph9 DPO is the primary point of contact for all data privacy enquiries, data subject rights requests, and data breach notifications.
If you are not satisfied with ph9's response to a data privacy concern, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines. Information on how to file a complaint with the NPC is available on the NPC's official government website.
ph9 protects your personal data with 256-bit encryption, strict PAGCOR-aligned compliance, and a dedicated Data Protection Officer. Join Filipino players from Manila to Davao who trust ph9 with their casino gaming — and their data.